Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa
File:                     3cb3247e-d780-36d0-8281-9099712cab81.roa (raw, json)
Hash identifier:          lRhtN/U5QuujndNlxC/XrGibFiviznO+Tl7T1xUWrrc=
Subject key identifier:   AD:AE:6A:03:17:78:D8:EB:DF:B5:D0:1E:52:82:0E:00:9C:D4:4E:A3
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858495E4F8B16D8A2E145D32DF7E8
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa
Signing time:             Mon 31 Mar 2025 07:40:05 +0000
ROA not before:           Mon 31 Mar 2025 07:40:05 +0000
ROA not after:            Sun 29 Jun 2025 07:40:05 +0000
asID:                     54339
IP address blocks:        65.110.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:4f:8b:16:d8:a2:e1:45:d3:2d:f7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Mar 31 07:40:05 2025 GMT
            Not After : Jun 29 07:40:05 2025 GMT
        Subject: CN=a0b000a5-a7d6-4fc6-bdc4-02dc32861fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:e3:11:67:58:eb:1e:e0:95:b0:ca:a1:fc:
                    da:c4:d6:e9:a0:67:03:d5:49:49:98:e8:89:39:70:
                    11:b3:3b:2c:59:6d:93:5b:d6:74:4c:83:45:ee:1f:
                    2b:c4:0c:e7:92:b4:58:8d:31:8f:c3:11:9c:86:8c:
                    4c:bc:8b:a1:0a:5a:0e:19:9e:c6:27:22:6c:ce:8b:
                    76:43:b7:30:af:61:42:6c:a9:ef:d0:c1:49:fd:d0:
                    c3:87:34:08:b6:6d:6a:32:5a:6e:14:b4:68:31:18:
                    af:68:44:d2:85:22:3f:02:45:b8:27:93:42:7d:19:
                    c5:a9:d3:0e:19:8b:c2:ed:18:eb:7f:bd:7a:05:82:
                    27:e5:0a:06:12:9a:48:84:9d:99:3b:7c:bb:2b:09:
                    11:d0:f9:b8:12:d9:bb:01:84:62:37:b4:02:4d:ee:
                    35:23:c2:5d:67:3e:7b:39:1d:9a:02:da:93:f0:af:
                    e0:8d:61:21:c4:fe:f0:fa:d6:6c:99:18:dc:1a:09:
                    80:d6:f0:84:13:2c:0c:76:66:ff:e2:cd:13:ce:da:
                    78:c2:ff:00:cd:5e:8e:70:80:6f:53:47:d6:61:f0:
                    28:b1:26:a9:fc:f8:66:b3:bf:2a:f0:59:5c:aa:5c:
                    0c:04:03:7c:d7:0f:36:5d:4a:f8:a6:b1:c1:14:b7:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AE:6A:03:17:78:D8:EB:DF:B5:D0:1E:52:82:0E:00:9C:D4:4E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:48:d3:0f:d6:a2:41:b6:27:68:7d:f9:69:34:8d:07:71:77:
         07:cb:cf:f3:36:e8:85:55:33:7e:4d:df:26:d6:e4:37:87:3f:
         a0:4f:6e:d8:ba:bc:e5:eb:b0:88:07:58:87:78:1c:80:69:4b:
         5e:1b:e0:b1:f6:29:d2:c8:0d:b4:e7:04:65:08:49:c9:27:7c:
         c5:df:73:e1:18:c3:32:9d:d7:22:d1:71:21:fb:08:3f:85:93:
         0e:49:5d:c2:70:22:fa:cd:0b:8e:7d:61:b8:90:06:31:72:f9:
         bd:de:0b:de:fe:b2:e0:56:83:02:21:14:35:ec:bb:fd:5b:c3:
         50:6b:97:7c:e2:ee:9b:79:33:40:c0:ad:5b:4c:45:1f:3d:37:
         3d:6c:4a:8c:e2:2f:60:c9:de:d0:d9:67:e1:d9:b8:b5:d7:c8:
         d0:14:0a:16:72:84:3c:cd:a5:ff:a1:60:ac:a7:d1:5a:96:1a:
         08:34:7a:ae:75:87:ae:1e:2d:10:3f:28:8b:18:18:07:cd:46:
         bf:54:04:cc:ff:2c:97:40:fc:58:ba:c2:b9:8b:94:93:61:36:
         7f:01:d8:6e:31:8c:db:1a:35:35:a7:d4:24:24:fd:6d:10:25:
         a9:e7:3f:a6:cd:67:ba:40:b9:02:a3:fa:88:56:e2:d5:df:e3:
         e7:e2:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:51 2025 by rpki-client on console.sobornost.net